Forum Discussion

cslacker_318492's avatar
cslacker_318492
Icon for Nimbostratus rankNimbostratus
May 01, 2017

Skype for Business Edge and SSL decryption

Has anyone had any experience configuring the BIG-IP for SSL visibility between two Skype for Business Edge Servers? I'm inclined to think this is a non-starter. By default, the SSL session uses ECDHE_RSA for key exchange and includes a Handshake Protocol: Certificate Verify message from the client.

 

Assuming that these characteristics make decrypt impossible, has anyone had success changing the ciphers used by the Edge servers?

 

BIG-IP
security
  • Yoav_Crombie_25's avatar
    Yoav_Crombie_25
    Icon for Nimbostratus rankNimbostratus
    May 02, 2017

    What are you trying to achieve with this? We have a product encrypting the SIP traffic on the EDGE as well as an iApp that integrates in F5 for HTTPS traffic control specifically of Skype for Business You can read more here: skypeShield.com

     

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    May 02, 2017

    Hi,

     

    As I understood, even if you can offload decrypt SSL, Edge connections are not HTTPS but skype protocol over SSL on port 443.